$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa File: 0baf61e0-eead-323c-b72c-efaab2756610.roa (raw, json) Hash identifier: BaJO6P7mCh2l/xCcPf6kIoz5yflEkdAY7xR6rNJVgKg= Subject key identifier: E0:D2:99:17:88:86:91:8A:38:AF:04:6F:08:AB:7B:9E:E6:70:90:0D Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584A8575F8DA390665450C915D40 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 16433 IP address blocks: 216.20.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:f8:da:39:06:65:45:0c:91:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=2356b1b8-ffd2-4841-ba0f-21a572a42219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:39:fb:81:b3:30:49:2d:06:18:b0:14:b9:39: 5a:4e:9a:f6:c9:fd:3d:b7:cf:0c:34:21:f6:ff:ac: 80:26:a9:c0:a5:d5:cb:02:88:ec:4c:6f:ff:f8:eb: 75:ab:04:a2:50:6c:78:1e:25:36:84:b5:d0:30:1b: 19:eb:d7:eb:52:cc:94:ae:3b:a5:bf:1c:cf:f7:fa: fd:f2:94:0d:05:0a:7e:c8:f2:ff:10:f0:7c:01:b9: 08:07:35:17:73:7d:47:c9:0b:fc:2a:74:49:db:a1: 19:c9:0b:49:7d:5b:6c:08:6a:73:4f:05:b4:bf:e8: 33:49:65:ab:62:34:b1:60:94:e6:2a:89:9c:90:e9: cc:5a:d2:ae:7d:57:1a:a0:ec:03:ee:9a:44:55:16: 50:85:d4:81:b8:ee:b1:8d:83:50:28:2d:67:bb:b2: b1:6d:de:95:08:9e:ad:89:62:4a:26:5b:ba:b7:bb: 0a:c4:12:e7:55:6e:bd:fc:1f:6c:b2:08:33:75:39: e8:03:9f:3c:51:4d:8f:f6:95:c1:0f:07:a2:1b:10: 69:d8:2a:ca:fa:91:93:ee:ec:c9:82:9e:e3:dd:77: cb:8a:cf:50:5a:eb:ab:14:75:3a:48:81:0a:3a:82: 70:1e:d3:9d:14:4a:bf:98:e1:3f:fb:51:be:ea:32: 0d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D2:99:17:88:86:91:8A:38:AF:04:6F:08:AB:7B:9E:E6:70:90:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 216.20.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:38:c5:49:2c:3c:9f:02:79:b0:05:42:e7:8e:b3:db:5f:24: 1b:88:46:b6:0a:0f:83:ee:c8:95:36:40:89:68:8b:d6:cf:a4: 34:bf:d2:94:bf:76:be:67:cb:28:d5:a7:8f:c6:94:c0:f6:42: 29:86:0b:ad:b2:0e:18:72:d6:d1:4b:fb:c3:ea:15:06:2f:72: 1a:07:dd:6f:60:51:d9:ce:d8:94:53:ac:4d:70:0b:7a:c4:72: 7c:03:71:50:b0:5b:e7:59:56:e7:47:4f:8d:91:ac:33:35:bf: d6:62:b4:4a:3a:92:9f:ff:72:32:cf:0c:c1:d0:d8:e5:73:69: 33:8a:da:15:d1:97:1d:ef:bc:49:ef:67:e0:01:69:c1:2d:44: cf:e8:2a:ec:bd:b3:d1:b3:ff:63:d2:f6:5a:a3:a5:02:0f:d5: 29:84:fd:5f:a4:c9:42:db:f2:b8:c3:57:56:c1:fc:00:42:42: 5c:d3:3f:9b:6b:76:7a:40:de:51:c2:5e:b6:ed:2a:da:dd:3b: 77:4f:55:69:d8:47:ba:79:ff:be:6d:c3:f8:7c:41:bb:bc:14: e6:48:2a:fd:5d:a8:2f:24:4d:b3:8b:41:4c:a8:bb:60:fe:71: 04:36:d3:97:7b:4a:c0:44:4c:4c:63:bb:41:4f:20:c1:19:6d: 94:9e:f4:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdfjaOQZlRQyRXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk MjM1NmIxYjgtZmZkMi00ODQxLWJhMGYtMjFhNTcyYTQyMjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDn7gbMwSS0GGLAUuTlaTpr2yf09t88MNCH2 /6yAJqnApdXLAojsTG//+Ot1qwSiUGx4HiU2hLXQMBsZ69frUsyUrjulvxzP9/r9 8pQNBQp+yPL/EPB8AbkIBzUXc31HyQv8KnRJ26EZyQtJfVtsCGpzTwW0v+gzSWWr YjSxYJTmKomckOnMWtKufVcaoOwD7ppEVRZQhdSBuO6xjYNQKC1nu7Kxbd6VCJ6t iWJKJlu6t7sKxBLnVW69/B9ssggzdTnoA588UU2P9pXBDweiGxBp2CrK+pGT7uzJ gp7j3XfLis9QWuurFHU6SIEKOoJwHtOdFEq/mOE/+1G+6jINIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODSmReIhpGKOK8Ebwire57mcJANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMGJhZjYxZTAtZWVhZC0z MjNjLWI3MmMtZWZhYWIyNzU2NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFA4xUksPJ8CebAFQueOs9tfJBuIRrYKD4PuyJU2QIloi9bPpDS/0pS/ dr5nyyjVp4/GlMD2QimGC62yDhhy1tFL+8PqFQYvchoH3W9gUdnO2JRTrE1wC3rE cnwDcVCwW+dZVudHT42RrDM1v9ZitEo6kp//cjLPDMHQ2OVzaTOK2hXRlx3vvEnv Z+ABacEtRM/oKuy9s9Gz/2PS9lqjpQIP1SmE/V+kyULb8rjDV1bB/ABCQlzTP5tr dnpA3lHCXrbtKtrdO3dPVWnYR7p5/75tw/h8Qbu8FOZIKv1dqC8kTbOLQUyou2D+ cQQ205d7SsBETExju0FPIMEZbZSe9Nw= -----END CERTIFICATE-----Generated at Wed Aug 6 00:38:42 2025 by rpki-client